Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          PHj2Ze08MTAF1nXFtLUGLzvMzLOWgIG6o1zeOa3aydE=
Subject key identifier:   59:3D:E4:AC:11:55:80:6B:FB:6E:1F:13:58:27:9E:25:A3:AA:8B:CD
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       01976CCFEE2F430892D8D7E808A07EFB4849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          15A5
Signing time:             Sat 14 Jun 2025 05:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:55 +0000
Files and hashes:         1: Kiv_IviKdC8pR128g7W0wceOpJ0.roa (hash: 50AAjX5lYU+hq4n12QkFVtcpqB6XzbZl6EuH3DlX6GI=)
                          2: O_qQBhVPe-lhoDKH0xP6ZLUmsAc.roa (hash: vu+grp6AJx6fVYcuWsQuJ7+juO2NiGJWuGAUCa5tGZs=)
                          3: dDDN-pm8MlP2fOpMtU7-mmZpLLc.roa (hash: GvJAp02zQtdWF4HXdYEMtMpvRfe1B4IDC0v2UHRYRus=)
                          4: kEWIZIp3fGY-KVqozb7d7-QMIuc.roa (hash: L3fmE7U8zD+tZ/ANMEm2Wevq9RhCHsMPy3iz467v0Hg=)
                          5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: EGrFIAQ9vDuJ/heiv5hvwe2FUrRgUCuHgbnUT/6/1eA=)
                          6: uU8hg8XfSe6mwX3ueW5oYDrRF0Q.roa (hash: UINusGV6ey+o0z0wW+D1a6Sa38oHaCWzK5v34NCpA+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:ee:2f:43:08:92:d8:d7:e8:08:a0:7e:fb:48:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Jun 14 05:00:55 2025 GMT
            Not After : Jun 15 05:00:55 2025 GMT
        Subject: CN=593de4ac1155806bfb6e1f1358279e25a3aa8bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:fb:d3:f5:81:f7:e0:63:db:4e:49:e8:35:
                    99:2b:7a:2d:a9:65:4b:a5:2e:c2:91:3c:65:c5:37:
                    f0:59:cf:b2:73:2f:cd:1a:7a:e9:6f:f0:25:bd:03:
                    30:c4:6b:69:71:ca:6f:51:c8:c8:18:29:c2:8a:76:
                    e0:ca:27:24:2b:b3:0a:3b:07:db:58:64:ed:bf:07:
                    4a:34:d5:4d:ad:1d:61:43:3a:b6:aa:3b:4b:86:d8:
                    fa:8c:d8:ba:37:40:e8:9d:08:ca:0c:d0:32:a3:96:
                    b8:63:de:22:96:d4:98:90:2a:15:1d:b5:46:27:ee:
                    3b:87:87:61:77:67:75:57:81:73:27:bc:99:d2:16:
                    a7:04:00:7f:d2:a0:55:5a:d1:5b:d3:a2:bc:46:ec:
                    28:c9:a7:a4:7d:be:1b:2b:75:97:06:05:ba:da:12:
                    b4:73:df:50:a0:22:ae:c3:49:15:fe:cf:a9:2e:33:
                    b8:e9:dd:e4:4e:e5:4c:0e:22:df:b9:e3:9b:35:44:
                    f7:a6:4d:38:ca:55:cb:22:86:d3:63:fd:36:e6:c4:
                    1a:42:b6:50:3d:91:ee:80:b1:00:10:bd:ce:1f:1b:
                    2e:e0:a1:ef:03:99:45:4b:6e:52:5e:c5:fe:a0:f6:
                    be:fb:52:92:e8:a2:50:f7:7a:0f:1e:f5:4f:36:0c:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3D:E4:AC:11:55:80:6B:FB:6E:1F:13:58:27:9E:25:A3:AA:8B:CD
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:be:f5:e4:a9:d4:11:e4:f2:d2:5e:49:d0:14:28:01:08:af:
         11:14:4a:e7:ef:ba:cb:86:42:77:d7:42:2e:89:30:95:6a:0b:
         a8:2b:dd:7a:29:1e:cd:31:bc:43:43:75:4e:4e:1c:b6:e4:ea:
         61:f9:32:38:49:5c:6a:63:fb:b9:25:33:61:ce:56:02:27:61:
         fb:74:91:bc:e1:a7:6b:d2:e4:3d:bf:e3:d8:18:4a:9d:ad:db:
         ad:a2:b7:41:62:4b:d0:59:25:b9:02:a7:0c:c4:04:c7:10:64:
         3f:9a:37:26:b4:01:c7:e9:3d:a0:9d:4f:cf:b6:6a:be:97:f4:
         8a:37:27:0b:fa:f7:5d:d7:3c:1c:cd:ed:d3:1b:b3:4b:e5:3c:
         1a:96:15:b6:25:a2:24:4d:f4:d0:74:b9:62:a4:9a:5d:d4:77:
         5d:8d:7f:98:55:cd:26:7a:68:c5:a4:1e:d5:03:be:8a:6c:44:
         87:c4:18:e2:01:e8:17:a9:4d:51:06:44:21:23:78:19:05:88:
         00:bb:a6:3e:3c:05:7b:60:88:70:d2:26:68:22:3f:c8:8b:84:
         c8:a7:ab:f7:89:fe:e0:ad:6f:0f:8d:8d:44:3d:46:ae:2c:c0:
         f8:2c:1c:ad:a1:71:a0:31:57:3e:3f:85:cd:88:99:93:8c:f8:
         54:21:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:17:35 2025 by rpki-client